Linux kernel local information disclosure vulnerability (CNVD-2017-07741)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the 'docheck' function of the kernel/bpf/verifier.c file in versions of Linux kernel prior to 4.11.1, which stems from the...

Code injection

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

DEBIAN-CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

CVE-2017-9150

CVE-2017-9150 affects the Linux kernel prior to 4.11.1, where the function do_check in kernel/bpf/verifier.c fails to expose the allow_ptr_leaks setting to constrain the output of print_bpf_insn. This omission enables local attackers to leak sensitive address information through crafted bpf syste...

CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

CVE-2017-9150: Exposure of Sensitive Information to an Unauthorized Actor

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

UBUNTU-CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

BSA-2017-268

Security Advisory ID : BSA-2017-268 Component : Linux Kernel Revision : 1.0: Interim Use-after-free vulnerability in mm/percpu.cin the Linux kernel through 4.6 allows local users to cause a denial of service BUG or possibly have unspecified other impact via crafted use of themmapandbpfsystem call...

PT-2017-18732

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1 Description The issue concerns the do check function in the Linux kernel, which fails to restrict the output of sensitive address information. This allows local users to obtain sensitive address informatio...

macOS / iOS Kernel 10.12.3 (16D32) - bpf Heap Overflow Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1125 The bpf ioctl BIOCSBLEN allows userspace to set the bpf buffer length: case BIOCSBLEN: / uint / if d-bdbif != 0 error = EINVAL; else uint size; bcopyaddr, &size, sizeof siz...

MacOS/iOS kernel heap overflow in bpf (CVE-2017-2482)

The bpf ioctl BIOCSBLEN allows userspace to set the bpf buffer length: case BIOCSBLEN: / uint / if d-bdbif != 0 error = EINVAL; else uint size; bcopyaddr, &size, sizeof size; if size bpfmaxbufsize size = bpfmaxbufsize; else if size bdbufsize = size; break; d-bdbif is set to the currently attached...

Apple macOS/iOS Kernel 10.12.3 (16D32) - 'bpf' Heap Overflow

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1125 The bpf ioctl BIOCSBLEN allows userspace to set the bpf buffer length: case BIOCSBLEN: / uint / if d-bdbif != 0 error = EINVAL; else uint size; bcopyaddr, &size, sizeof size; if size bpfmaxbufsize size = bpfmaxbufsize; else ...

Apple macOSiOS Kernel 10.12.3 (16D32) - bpf Heap Overflow

Apple macOSiOS Kernel 10.12.3 16D32 - bpf Heap Overflow / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1125 The bpf ioctl BIOCSBLEN allows userspace to set the bpf buffer length: case BIOCSBLEN: / uint / if d-bdbif != 0 error = EINVAL; else uint size; bcopyaddr, &size, sizeof...

Firejail Local Elevation of Privilege Vulnerability

Firejail is a SUID program designed to reduce the risk of security violations by restricting the runtime environment of untrusted applications through the use of Linux namespaces and seccomp-bpf. Firejail suffers from a local elevation of privilege vulnerability. An attacker could exploit this...

PCAUSA Rawether for Windows local privilege escalation

Overview PCAUSA's Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. This vulnerability may be exploited to perform local privilege escalation on...

PT-2017-15054

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x through 4.9.71 Description The issue is related to the Linux kernel's BPF verifier, which fails to check the relationship between pointer values and the BPF stack. This can be exploited by local users to cause a...